Security Engineer II

Responsibilities

Conduct security design reviews and threat modeling for services, applications, APIs, infrastructure, mobile platforms, AI systems, and production software. Assess third-party AI agents through adversarial testing of behavior, tool use, data access, permissions, prompt injection, and external integrations. Perform hands-on penetration testing to identify exploitable vulnerabilities and complex attack paths. Design and build AI-powered automation for security reviews, threat modeling, penetration testing, and offensive security assessments. Analyze engineering proposals, cloud and infrastructure designs, application and data-layer security, and distributed-system trade-offs. Translate security findings into actionable guidance and systemic improvements for technical and non-technical stakeholders. Collaborate with engineering and security teams to identify design flaws before production and strengthen security controls. Champion secure engineering practices and serve as a security ambassador across the company.

Requirements

At least 3 years of professional experience in security engineering, systems architecture, or a related software engineering field. Bachelor’s degree in Computer Science, Engineering, or equivalent practical experience. Ability to analyze complex system designs and provide technical input for security challenges involving multiple dependencies. Knowledge of threat modeling, vulnerability classification, and risk modeling frameworks. Experience with cloud-native services, microservices, distributed systems, or related security designs. Experience with security design reviews and threat modeling across applications, services, APIs, infrastructure, mobile platforms, and AI systems. Ability to identify complex attack paths and systemic weaknesses across application, infrastructure, identity, data, and trust boundaries. Experience with code-assisted security reviews and large-scale distributed or cloud-native architectures. Advanced proficiency in at least one backend language such as Go, Java, or Python. Experience with multi-cloud environments such as AWS and GCP and with SQL or NoSQL data stores. Experience applying AI, LLMs, agents, or automation frameworks to security testing or security engineering workflows. Experience with automated CI/CD environments or a mature Secure Software Development Lifecycle.

Benefits

Base salary range of USD $171,000 to USD $190,000 per year for Seattle, Washington-based roles. Eligibility for Uber’s bonus program and potential equity awards and other compensation. 401(k) plan eligibility for full-time employees. Various employee benefits.